ossf/scorecard
1
1
Fork 0
mirror of https://github.com/ossf/scorecard.git synced 2024-11-05 05:17:00 +03:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity
759 Commits 37 Branches 42 Tags 439 MiB
afb01f47f7
Commit Graph

48 Commits

Author SHA1 Message Date
Azeem Shaikh
bc37c74b28
Remove Owner/Repo strings from CheckRequest (#997) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-09-10 10:13:14 -07:00
Azeem Shaikh
e730e911e6
sce.Create -> sce.WithMessage for wrapcheck (#995) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-09-10 15:50:33 +00:00
naveen
576447a45b 🌱 Fix the jwt finding 
* This fixes the JWT finding CVE-2020-26160
 2021-09-08 11:17:40 -05:00
neil465
5476b878bd
✨ Removed unnecessary linters (#969) 
* gomnd
* prealloc
* dupl
 2021-09-07 10:45:12 -04:00
Azeem Shaikh
7b912e8903
Return DefaultBranch as part of ListBranches (#960) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-09-03 14:40:32 +00:00
Azeem Shaikh
afe5b40567
Make RepoClient as default interface for Scorecard (#951) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-09-02 02:32:26 +00:00
Azeem Shaikh
eceb577b84
Add and use RepoClient API for ListStatuses (#949) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-09-01 18:34:58 +00:00
Azeem Shaikh
eb2b3b2185
Add RepoClient API for ListCheckRunsForRef (#948) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-09-01 17:43:53 +00:00
Azeem Shaikh
99b9c91570
Use RepoClient API for Packaging check (#940) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-09-01 01:05:34 +00:00
Azeem Shaikh
e305a94e4f
Use ListReleases API for BranchProtection check (#937) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-30 17:52:08 -07:00
Azeem Shaikh
9a1978a051
Use RefUpdateRule in BranchProtection check (#936) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-30 23:14:42 +00:00
Azeem Shaikh
fe54c5131c
Only call GitHub APIs when needed (#918) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-26 22:09:41 +00:00
Azeem Shaikh
37696aceb3
Create and use MockRepoClient in unit tests (#922) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-26 19:48:39 +00:00
Azeem Shaikh
2d65ab4f0c
Remove ErrRepoUnavailable (#908) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-25 09:33:59 -07:00
Azeem Shaikh
e73f08e76c
Fix nil ptr dereference (#907) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-08-25 07:09:24 -07:00
Azeem Shaikh
41d0ce38c4
Replace errors.As with Is (#901) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-25 01:03:45 +00:00
Azeem Shaikh
b7c0d03b25
Handle GitHub repos with redirects (#876) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-21 20:45:57 -07:00
Azeem Shaikh
63a8fc73af
Nil pointer dereference (#864) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-17 14:07:49 +00:00
Azeem Shaikh
cf01ea69c7
Fix nil pointer dereference bug (#860) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-17 01:08:09 +00:00
Azeem Shaikh
13ef9dd7e0
Use RepoClient.Search API in SAST check (#857) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-16 17:34:10 +00:00
Azeem Shaikh
42ee430332
Use RepoClient API for Fuzzing (#855) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-14 00:34:40 +00:00
Azeem Shaikh
8baaaa4cf8
Use RepoClient API for Contributors check (#854) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-13 18:13:43 +00:00
Azeem Shaikh
b7ddc9ac93
Update go-github version for consistency (#852) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-13 00:43:22 +00:00
Azeem Shaikh
3f9431d08c
Update SignedReleases to use RepoClient API (#844) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-12 20:46:06 +00:00
Azeem Shaikh
eeb563be10
Update SAST and CITest with Repoclient API (#842) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-12 08:27:48 +10:00
Azeem Shaikh
f4d2628799
Ignore errors extracting corrupted tarball (#812) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-06 01:03:35 +00:00
Azeem Shaikh
790a7778e7
Handle tarballs that cannot be downloaded. (#809) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-03 15:31:32 -07:00
laurentsimon
6718939a08
✨ Cleanup errors and log (#782) 
* cleanup

* text

* add errors

* fixes

* more

* fixes

* linnter

* comments

* name
 2021-08-02 22:38:42 +00:00
Azeem Shaikh
6368c25f54
More linter issues (#794) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-08-01 03:42:14 +00:00
Azeem Shaikh
83e9f52501
Enable revive linters which are used in google3 (#793) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-07-31 22:31:34 +00:00
Azeem Shaikh
1d1e799f84
Add ListCommits and IsArchived API (#772) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-07-29 14:18:58 -07:00
Naveen
4d7fb5d748
🌱 Fix the go.mod with v2 upgrade (#716) 
The go.mod and the related files weren't t updated with the v2 upgrade.

https://github.com/ossf/scorecard/issues/711

This fix will address the issue.
 2021-07-26 13:01:25 -05:00
Azeem Shaikh
9bf1cdc9ce
Update ListFiles API to return error (#746) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-07-25 17:47:36 -07:00
Azeem Shaikh
7c133bc767
Create APIs for MergedPRs and DefaultBranch (#745) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-07-25 17:37:14 -07:00
laurentsimon
ab4bb60c9c
✨ [migration to score] 1: create errors and new functions (#712) 
* details-1

* comment

* doc

* nits

* typo

* commments

* nit

* linter
 2021-07-20 11:36:35 -07:00
Azeem Shaikh
aba44d8b9f
Handle 300 MultipleChoices HTTP status (#670) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-07-09 04:42:57 +00:00
Azeem Shaikh
164f6094ef
Handle 404 errors for GitHub tarball (#667) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-07-07 14:15:15 -07:00
Azeem Shaikh
581e170db1
Add a tarball handler (#654) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-07-04 17:35:53 -07:00
Azeem Shaikh
aab6c217cc
Add monitoring to measure remaining Github tokens (#652) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-07-04 14:42:21 -07:00
Azeem Shaikh
68dc079b79
Fix bug causing performance issues (#649) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-07-02 21:12:53 +00:00
laurentsimon
e06ce1529d
don't log (#641) 2021-07-01 16:31:03 -07:00
Azeem Shaikh
d81fd24246
Add ListFiles and GetFileContent APIs (#637) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-30 23:49:49 -07:00
dependabot[bot]
5dd7f118ae
🌱 Bump github.com/golangci/golangci-lint from 1.40.1 to 1.41.1 (#627) 
Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.40.1 to 1.41.1.
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/golangci/golangci-lint/compare/v1.40.1...v1.41.1)

---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: Azeem Shaikh <azeems@google.com>
Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-06-29 10:26:16 -07:00
laurentsimon
4ba05eb369
🐛 Comments (#599) 
* comments

* typo
 2021-06-22 12:22:47 -07:00
laurentsimon
1829ee7600
🐛 Fix for e2e failures (#598) 
* draft

* fixes

* linter

* disable parallel

* comments

* commments

* linter
 2021-06-22 10:55:59 -07:00
Azeem Shaikh
db02490da4
50k cron repos and allow skipping 404 URLs (#591) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-18 16:00:08 -07:00
Azeem Shaikh
c41f068223
Fix cron worker OOM-ing (#590) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-18 00:03:45 -07:00
Azeem Shaikh
0b62c58704
Add v0 of RepoClient interface (#587) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-17 13:21:32 -07:00